help with morewillsearch removal

Discussion in 'Malware Help (A Specialist Will Reply)' started by trav4182, Oct 19, 2005.

  1. trav4182

    trav4182 Private E-2

    I have read and performed the instructions on the "read me and run me"page
    When I do a google search it takes me to morewillsearch
    my hijack log is attached
    I am not super savey re computers and could use all the help I can get
    Thanks in advance
     

    Attached Files:

  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    There are no signs of you running the online scans listed in the READ ME, is there a reason for this?

    Please go back and run the online scans and then attach a fresh HJT log from normal mode.
     
  3. trav4182

    trav4182 Private E-2

    Thanks for taking time to help the computer challenged
    I did run the trend micro scan for both syware and virus, it found some and fixed, however, the problem still persists.
    I think the hijack log was recorded before the scan and i will do a new one and attach to next thread when I get to the computer in my home.
    Again, thanks for your attention
    If youneed geeks for realestate or financing help I would love to return the favor
     
  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    10-04, after you complete the scans attach a fresh HJT log from normal mode and we will address your issue.
     
  5. trav4182

    trav4182 Private E-2

    I have run norton scan, trend micro and bitdefender. Bitdefender said still infected after scan . Norton and trend said no infections. trojanscan stopped andgave message access violation at address 02784008 in module 'a2kernel.dll'. read address 67706d26
    I am going to try to attach both the fresh highjack log and the report from bitdefender is saved as

    C:\Documents and Settings\Steve\Desktop\bitscanreport.html

    Inline log attached!


    Sorry if this is not the correct format for this report
     

    Attached Files:

    Last edited by a moderator: Oct 20, 2005
  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Download this trial version of Ewido Security Suite

    • Install ewido security suite
    • Launch ewido, there should be an icon on your desktop double-click it.
    • The program will have a window come up. One of the buttons on the left is to Update. Click the Update button.and then Start the Update. The update will start and a progress bar will show the updates being installed.
    • After it completes the update, click the Scanner button

    Now exit Ewido. Now print the below instructions or save them locally because I want you do have no browsers opened and also have no connection to the internet (unplug your cable) while doing the below.

    Okay, reboot into safe mode and follow the steps below. (If you have any problems at all trying to get into safe mode to complete these steps, just run them in normal boot mode and make sure you tell me when you come back.)

    Open up Ewido and do the following:


    • Click on Scanner
    • Then click Settings
    • Under What to Scan? Select Scan every file
    • Then click OK
    • Click on Complete System Scan and the scan will start.
    • Let the program scan the machine
    While the scan is in progress you will be prompted to clean files that are infected. Leave the defaults selections (to Remove and backup) and click OK. To save yourself some time, you can select Perform action with all infections and then click OK. With the option to scan every file, a lot of cookies will be removed.

    Once the scan has completed, there will be a button located on the bottom of the screen named Save report


    • Click Save report
    • Save the report to your desktop or anyplace you will be able to find it to upload here.
    Reboot into normal mode and reconnect to the internet.

    Come back here and post the Ewido Scan Report along with a fresh HJT log without the MD5
     
  7. trav4182

    trav4182 Private E-2

    here it is, followed the steps
     

    Attached Files:

  8. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Scan with HijackThis and Check the Boxes for the following:

    Make sure All Browser Windows are Closed when you Click FIX.

    O2 - BHO: Google Desktop Search Capture - {7c1ce531-09e9-4fc5-9803-1c2956615786} - C:\Program Files\Google\Google Desktop Search\GoogleDesktopIE.dll (file missing)
    O2 - BHO: MSEvents Object - {827DC836-DD9F-4A68-A602-5812EB50A834} - C:\WINDOWS\system32\ssqpm.dll (file missing)
    O2 - BHO: Bho - {EFDAC3FE-F44A-4030-8589-1E23BC6573D5} - C:\WINDOWS\system32\jovgqaot.dll (file missing)

    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)
    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe (file missing)

    O20 - Winlogon Notify: ssqpm - C:\WINDOWS\system32\ssqpm.dll (file missing)

    Again, make sure All Browser Windows are Closed when you Click FIX.

    NEXT:
    Run CCleaner to clean up cookies and temp files.

    Run full scans with Ad-Aware SE & Spybot S&D and have both programs fix what they find.
    Note: Remember to get all updates before doing the scans.


    After you complete the above, REBOOT scan with HijackThis and attach the new log.
     
  9. trav4182

    trav4182 Private E-2

    It would seem that you have fixed the problem :)
    Can't begin to thank you enough
    I am attaching new highjack log
    please confirm if I need any further action

    I also read the part about keeping malwave off my computer including replacing java with sun java etc.
    Should I complete those procedures??

    Also now have Spysweeper, spydoctor, ewido secutity suite and norton internet security on my system.
    Do they conflict
    System still seems a little slow

    Thanks again for your help, hard to express how grateful I am for you assistance
     

    Attached Files:

  10. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    You should complete all of the steps in the how to protect article, it will keep you better protected from online threats.

    No they will not conflict but keep in mind, SpySweeper & Ewido are not free, they are shareware which means in order to get further updates you will need to purchase. They are great programs however there are free ones that do just as good. If your system is running slow I would uninstall SpySweeper and Ewido because they use a lot of resources.
     
  11. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your HJT log is clean, are you having any further malware problems?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds